NAIC Insurance Data Security Model Law (MDL-668)
Section 5: Investigation of a Cybersecurity Event – NAIC Insurance Data Security Model Law (MDL-668)

NAIC Insurance Data Security Model Law (MDL-668) 5D: Retain Cybersecurity Event records for five years

What does 5D require?

Records about every Cybersecurity Event are kept by the Licensee for no less than five years after the event occurred, and are handed over whenever the Commissioner asks for them.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Section 5: Investigation of a Cybersecurity Event – NAIC Insurance Data Security Model Law (MDL-668)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NAIC Insurance Data Security Model Law (MDL-668) controls